KR20230138364A - Framework preventing unauthorized use of documents - Google Patents

Abstract

The present invention relates to a framework for electronic document security, which can be used for various user systems or applications.
Prevents illegal use or leakage of electronic documents distributed through electronic documents, and is responsible for the distribution of electronic documents.
distribution system; Electronic document management system responsible for creating electronic documents or managing security policies; and electronic documents
Consisting of an electronic document registration system responsible for registering electronic documents, such as issuing or linking identification numbers.
It is characterized by being
According to the present invention, illegal use or leakage of electronic documents is prevented according to various user systems or applications.
By providing a function to prevent information leakage, a wide range of security services are possible for electronic documents and various risks of information leakage are possible.
You can respond flexibly depending on the case type.

Description

Framework for securing electronic documents{FRAMEWORK PREVENTING UNAUTHORIZED USE OF DOCUMENTS}

[0002] The present invention relates to electronic document security, particularly when distributed through various user systems or applications.

is a framework for electronic document security that can prevent electronic documents from being used or leaked illegally.

It's about.

[0003] With the development and rapid spread of IT technology, companies' intellectual property is divided into groupware, knowledge management systems, and electronic document management.

It is integrated and managed through the management system and e-mail, and employees share this intellectual property.

It contributes to improving the productivity of companies. In addition, in order to improve efficiency, networks such as LAN, Internet, and e-mail are used.

Transmission of electronic documents and joint work are carried out through networks, and efforts are being made to create a mobile work environment.

The use of electronic documents through computers, PDAs, etc. is being actively used.

[0004] However, as access to important information requiring security becomes easier due to adverse effects caused by the development of IT technology,

The company's confidential information or important intellectual property is illegally distributed externally through methods such as email, storage devices, or printing.

The possibility of leakage is increasing. For example, a PC infected by a hacker with the Trojan Horse virus, etc.

You can view, modify or delete files by remotely controlling the data stored in the

It may be possible.

[0005] Meanwhile, a typical conventional electronic document security system maintains a secure state using a separate encryption algorithm.

You can set permissions for each user, use and control them according to permissions, and check the user's document usage history, etc.

Monitor. In this way, the leakage of important internal documents to the outside is controlled only for closed user groups.

do.

[0006] However, these electronic document security systems are designed to prevent external leakage of internal confidential information or important intellectual property.

To achieve the purpose, the characteristics of the system or application within the company where electronic documents are distributed are considered.

There is a problem that is implemented without careful consideration.

[0007] Therefore, in order to apply an electronic document security system within a company, a long customization period and application are required.

There are cases where it is not possible to meet the various requirements of companies due to differences in implemented characteristics.

It can happen.

[0008] In addition, this electronic document security system allows collaborative work on important documents that may occur frequently within a company.

(e.g., business plan or business license application, etc.) or virtual groups that may be created or destroyed at any time (e.g.,

There is a problem with insufficient consideration of (my security TFT, etc.).

Accordingly, the present invention was devised to solve the above problems, and can be used in various user systems or applications.

Proactively respond to the threat of illegal use or leakage of electronic documents distributed through the application.

The purpose is to provide a framework for preventable electronic document security.

[0010] In order to achieve the above purpose, a framework for electronic document security according to the present invention is provided to various users.

Prevent illegal use or leakage of electronic documents distributed through systems or applications, and

Electronic document distribution system responsible for distribution; Electronic document officer responsible for creating electronic documents or managing security policies

Lee system; and electronic documents responsible for registration of electronic documents, such as issuing or linking electronic document identification numbers, etc.

It is characterized by being configured including a lock system.

[0011] At this time, the electronic document distribution system allows the user who has received the electronic document to view and work on the electronic document.

A user authentication/management module that authenticates users and manages users when a license is required; electronic documents

A system that manages each user by receiving logs sent from the client regarding the usage history of deployed users.

User document usage history management module; Illegal actions related to electronic documents according to rules set based on the user’s usage history

Illegal activity management module related to electronic documents that detects and notifies attempted use/leakage; and electronic document management systems;

User license that is linked but assigns and manages licenses for each user to whom electronic documents are distributed upon license request.

It is desirable that it consists of a management module.

[0012] In addition, the electronic document management system packages the corresponding electronic document into a document in a secure form and then provides the packaged information.

A secure document creation management module that sets user-specific permissions for documents; Classification or rating of applicable electronic documents

Security/license policy management that sets usage rights based on user needs/organization/job/position

module; and an organization chart/virtual group management module that manages an organization chart or virtual group within a company that manages electronic documents.

It is desirable to be configured.

[0013] In addition, the electronic document registration system assigns an identification number to each electronic document and then manages registration of the electronic document, etc.

lock management module; and an electronic document identification number management module that manages the identification number assigned to each electronic document.

It is desirable.

[0014] Meanwhile, the framework is an electronic document registrant payment/settlement module responsible for payment/settlement to the electronic document registrant.

module; and Payments, which consists of an Electronic Document User Payment/Settlement module, which is responsible for making payments/settlements to Electronic Document Users.

It is desirable to further include a management system.

[0015] In addition, the framework is designed to protect electronic documents from illegal attacks according to various internal/external attack types and user requirements.

Prevent unauthorized use or leakage, and take into account the electronic document collaboration environment within companies that manage electronic documents.

It is desirable to manage the history of your document work.

[0016] In addition, the framework is an integrated authentication system linked according to a security policy while maintaining the security status of electronic documents.

It is desirable to integrate and manage electronic documents through linking with the system.

[0017] Hereinafter, the present invention will be described in detail with reference to the attached drawings.

[0018] Figure 1 is a framework configuration diagram for electronic document security according to the present invention, showing an electronic document distribution system 210,

The framework consists of a document management system 220 and an electronic document registration system 230.

(200) is connected to the integrated authentication system (100) installed at the user end.

[0019] The framework 200 for electronic document security according to the present invention is groupware or knowledge management system (KMS/EDMS), etc.

Electronic information distributed through user systems such as e-mail or applications such as Internet storage space, etc.

Prevent illegal use or leakage of your documents.

[0020] The electronic document distribution system 210 is responsible for distributing electronic documents, and the electronic document management system 220 is responsible for distributing electronic documents.

Responsible for creating and managing security policies. And, the electronic document registration system 230 generates the identification number of the electronic document.

Responsible for registering electronic documents such as class or linkage.

[0041] As described above, the framework for electronic document security is used in various user systems or applications.

Accordingly, by providing a function to prevent illegal use or leakage of electronic documents,

Security services are available and can respond flexibly to various types of information leakage attacks.

1 is a schematic diagram of a framework for electronic document security according to the present invention;
Figure 2 is an embodiment in which the work history of a secure document is managed through an electronic document distribution system according to the present invention;
3 is an example of a user authentication screen of a client mapped to a user authentication/management module according to the present invention;
Figure 4 shows an embodiment implemented through a security/license policy management module according to the present invention;
Figure 5 is an embodiment implemented through an organization chart/virtual group management module according to the present invention;
Figure 6 shows that the security document created for distribution/management on any system or application is stored in another system or application.
is a concept diagram that is integrated and managed in conjunction with the application,
Figure 7 shows the framework for electronic document security according to the present invention using a PC electronic document security solution and an e-mail attachment.
Flow chart processed according to linkage with secondary document security solution,
Figure 8 is a conceptual diagram of a work environment within a company that manages electronic documents.
*Explanation of symbols for main parts of the drawing
100: Integrated authentication system 200: Framework for electronic document security
210: Electronic document distribution system 211: User authentication/management module
212: Electronic document usage history management module 213: Electronic document-related illegal activity management module
214: User license management module 220: Electronic document management system
221: Security document creation management module 222: Security/license policy management module
223: Organization chart/virtual group management module 230: Electronic document registration system
231: Electronic document registration management module 232: Electronic document identification number management module

[0021] Meanwhile, the electronic document distribution system 210 includes a user authentication/management module 211, an electronic document usage history management module 212,

It consists of an illegal activity management module 213 related to electronic documents, and a user license management module 214.

[0022] The user authentication/management module 211 allows a user who has received an electronic document to view or work on the electronic document.

When a license is required, authenticate users and manage users. Manage electronic document usage history

The module 212 is a client that records the usage history of users who have distributed electronic documents, that is, viewing, printing, editing, saving, etc.

Receives logs delivered from and manages them for each user.

[0023] And, the electronic document-related illegal activity management module 213 is set by the administrator based on the user's usage history.

Detects illegal use or leak attempts related to electronic documents according to the rules of anomaly or misuse profiling.

notify. The user license management module 214 is linked with the electronic document management system, but when a license is requested, the user license management module 214

Licenses are assigned and managed for each user to whom the document has been distributed.

The electronic document management system 220 includes a security document creation management module 221, a security/license policy management module 222,

and an organization chart/virtual group management module 223.

[0025] The security document creation management module 221 packages the corresponding electronic document into a document in a secure form and then

Set permissions for each user for the document. The security/license policy management module 222 manages the appropriate electronic documents.

Set a class or level, and view, print, edit, save, etc. according to the user's needs, organizational structure, job, and position.

Set usage rights for combinations of locks, etc. The organization chart/virtual group management module 223 is a device for managing electronic documents.

Manage organizational charts and virtual groups within the business.

[0026] At this time, the security document creation management module 221 is a specific user system or application in the packaging information when packaging.

In addition, the security/license policy management module 222 includes information about the packaged security document.

It is advisable to set usage rights.

[0027] This includes different security document generation methods, encryption and decryption algorithms, keys, and packaging methods for each security field.

Security is guaranteed in the process of converting the corresponding security document to another system or application.

Not only do electronic documents exist in an unapplied state, but the information required for management and encryption and decryption is transferred between systems.

This is because there is a need for transmission and reception, which inevitably leads to security vulnerabilities.

[0028] The electronic document registration system 230 includes an electronic document registration management module 231 and an electronic document identification number management module 23.

2) It consists of: The electronic document registration management module 231 assigns an identification number to each electronic document and then manages registration.

Additionally, the electronic document identification number management module 232 manages identification numbers assigned to each electronic document.

[0029] Meanwhile, the framework 200 according to the present invention provides payment/payment to the electronic document registrant for payment processing according to the paid system.

Electronic document registrant payment/settlement module responsible for payment, and electronic document registrant payment/settlement module responsible for payment/settlement for electronic document users

Preferably implemented by additionally including a payment management system consisting of a self-document user payment/settlement module.

can do.

[0030] Figure 2 is an embodiment in which the work history of a secure document is managed through an electronic document distribution system according to the present invention.

It shows what kind of work goes into creating my business plan.

[0031] Figure 3 is an example of a user authentication screen of a client mapped to the user authentication/management module according to the present invention, where the user

A user system such as groupware or knowledge management system, e-mail or Internet storage space, etc.

This appears when you try to use a secure document using an application such as . As shown in Figure 3, before

In cases where the service is not subscriber-based, such as for recipients of email, an authentication screen is displayed separately.

[0032] Figure 4 is an embodiment implemented through a security/license policy management module according to the present invention, and Figure 5 is an embodiment of the present invention.

Accordingly, an embodiment implemented through the organization chart/virtual group management module is shown.

[0033] Figure 6 shows a security document (A) created for distribution/management on any system or application.

Or, it can be linked with user systems such as KMS/EDMS or applications such as e-mail or local PC electronic document security.

This is a conceptual diagram showing how it can be distributed and managed.

[0034] Figure 7 shows a framework for electronic document security according to the present invention, a PC electronic document security solution and an e-mail attachment.

This is a flow chart that is processed according to linkage with the secondary document security solution.

[0035] Referring to Figure 7, the creation of a secure document is completed through a series of processes for electronic documents in the user's local PC.

(①,②) Next, attach the created security document to an e-mail, then log in and set permissions for each e-mail recipient.

C (③,④) Next, change the packaging information while maintaining the security status of the electronic document, and then send the secure document.

(⑤,⑥)

[0036] Figure 8 is a conceptual diagram of a work environment within a company that manages electronic documents, such as important intellectual property and business plans.

In the case of electronic documents, they are created through collaborative work rather than individual work, and continuous updating occurs.

do.

[0037] In the case of a work environment as shown in Figure 8, a security document created by a specific user is shared in various forms.

Not only must it be possible to link with various systems or applications so that it can be applied to work, but also

Is the security document you have the latest version and how are other users' opinions reflected, etc.

You must be able to check.

[0038] Therefore, the present invention provides a message digest of the original document (original electronic document or secure document) in the document packaging information.

By adding a value, we can determine whether the addition operation is normal and the concept of the parent security document from which the current security document is derived.

By doing so, various collaborative tasks as well as clear version management of collaborative documents can be achieved.

[0039] Meanwhile, the framework 200 for electronic document security according to the present invention is capable of protecting against various types of internal/external attacks and

It is desirable to prevent illegal use or leakage of electronic documents in accordance with user requirements, and to manage the history of electronic document work by considering the electronic document collaboration environment within a company that manages electronic documents.

In addition, the framework 200 for electronic document security according to the present invention is as shown in Figure 1, the security of electronic documents

Integrated authentication system (100) such as SSO (Single Sign On) linked according to security policy while maintaining security status

It is desirable to integrate and manage electronic documents through linking with.

Claims (8)

Illegal use or leakage of electronic documents distributed through various user systems or applications
Prevent,
Electronic document distribution system responsible for the distribution of electronic documents;
Electronic document management system responsible for creating electronic documents or managing security policies; and
Includes an electronic document registration system that is responsible for registering electronic documents, such as issuing or linking electronic document identification numbers.
A framework for electronic document security, characterized in that it is composed of: The electronic document distribution system of claim 1,
When a user who has received an electronic document requests a license to view and work with the electronic document, the user must be authenticated.
User authentication/management module to perform and manage users;
By receiving logs from the client about the usage history of users who have distributed electronic documents,
A module that manages electronic document usage history;
Detects and notifies attempts to illegally use/leak electronic documents according to rules set based on user usage history
A module for managing illegal activities related to electronic documents; and
It is linked to the electronic document management system, but when a license is requested, a license is assigned to each user who has distributed electronic documents.
A framework for electronic document security, characterized in that it consists of a user license management module that manages and manages user licenses. The electronic document management system of claim 1,
After packaging the relevant electronic document into a secure document, set user-specific permissions for the packaged secure document.
A security document creation management module;
Set the classification or grade of the applicable electronic document and grant usage rights according to the user's need/organization/job/position.
A security/license policy management module that sets up; and
It consists of an organization chart/virtual group management module that manages an organization chart or virtual group within a company that manages electronic documents.
A framework for electronic document security featuring: According to claim 3,
The security document creation management module adds specific user system or application information to the packaging information at the time of packaging.
Include,
The security/license policy management module is characterized in that it sets usage rights for packaged security documents.
is a framework for electronic document security. The electronic document registration system of claim 1,
An electronic document registration management module that assigns an identification number to each electronic document and then manages registration; and
Characterized by consisting of an electronic document identification number management module that manages the identification number assigned to each electronic document.
A framework for electronic document security. The framework of claim 1:
Electronic document registrant payment/settlement module responsible for payment/settlement to electronic document registrants; and
A framework for electronic document security characterized by further comprising a payment management system consisting of an electronic document user payment/settlement module responsible for making payments/settlements to electronic document users. The framework of claim 1:
Prevent illegal use or leakage of electronic documents according to various internal/external attack types and user requirements
and manage the history of electronic document work, taking into account the electronic document collaboration environment within a company that manages electronic documents.
A framework for electronic document security, characterized in that: The framework of claim 1:
While maintaining the security status of electronic documents, electronic documents can be accessed through linking with an integrated authentication system linked according to security policies.
A framework for electronic document security characterized by integrated management of documents.